This is the mail archive of the
mailing list for the Cygwin project.
- From: "Michael Kairys" <kairys at comcast dot net>
- To: cygwin at cygwin dot com
- Date: Tue, 25 Aug 2009 20:09:52 -0400
- Subject: BitDefender again
BitDefender AntiVirus 2009 and Cygwin got along fine, but when I upgraded to
2010 all my Cygwin-based apps started crashing. If I turn off their "Active
Virus Control" the problem goes away.
They offer this advice:
There is an incompatibility between cygwin and BitDefender AVC (Behavioral
I'm going to get a little bit technical here in order to explain in detail
what is happening :
Unfortunately, cygwin1.dll has a hardcoded image loading base (0x61000000)
wich conflicts with one of the BitDefender AVC plugins injected into
processes for monitoring their behaviour. Since, to offer maximum
protection, the BitDefender AVC dlls are among the first to be loaded in the
address space of any process, and well before cygwin1.dll, the cygwin1.dll
cannot load at its desired image base, thus generating crashes. In a general
purpose DLL written for Windows, this is not a problem, since such dll can
work being loaded at any imagebase. But this is not the case for cygwin,
wich insists on loading at the fixed address, and if not, generating
Now, how to fix :
1. Temporary disable AVC (BitDefender->Antivirus->Advanced Settings, uncheck
2. Make sure all cygwin applications are closed.
3. Open a cmd line and enter the following :
copy cygwin1.dll cygwin_orig.dll
copy cygwin1.dll cygwin_tmp.dll
rebase -b 0x35000000 cygwin_tmp.dll
copy cygwin_tmp.dll cygwin1.dll
4. Reenable AVC (BitDefender->Antivirus->Advanced Settings, check AVC)
Try now to run cygwin.
By doing the above, we remapped cygwin1.dll to another imagebase
(0x35000000). If it still does not work, please try remapping at various
imagebases (such as 0x30000000 or 0x40000000 or 0x25000000 etc) until you
find one that works.
I have a very limited understanding here, enough to run rebaseall (which
I've done) and that's about it. Can someone please interpret the above for
me and tell me if there's anything I can do besides shop for a new AV vendor
Problem reports: http://cygwin.com/problems.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple